Legal
Sub-processors
Last updated · October 9, 2026 · 30 days notice for any new sub-processor · subscribe
Hetzner Online GmbH
- Purpose
- Hosting: application servers, database, inbound mail server, local backups
- Data
- All service data
- Location
- Germany (Nuremberg)
- Transfer safeguard
- EU, no transfer
Cloudflare, Inc.
- Purpose
- DNS, DDoS protection and reverse proxy for muro.chat: all dashboard, widget and API traffic passes through it and TLS ends at its edge. Also stores our off-site backups (R2), encrypted with AES-256 before upload, so Cloudflare cannot read them.
- Data
- Traffic in transit, encrypted backups
- Location
- Global network, US company
- Transfer safeguard
- EU-US Data Privacy Framework, SCCs (Cloudflare DPA)
Anthropic, PBC
- Purpose
- AI features when they are on for a site: triage, summaries, auto-reply, suggested replies, help-article drafts. Not used for a site with AI turned off, and not used by us when a workspace brings its own Anthropic key.
- Data
- Message content, site name, visitor name if given. Never page addresses or IPs.
- Location
- US
- Transfer safeguard
- SCCs (Anthropic DPA)
Amazon Web Services EMEA SARL (Amazon SES)
- Purpose
- Transactional email and new-message notifications to the workspace team
- Data
- Email addresses, message excerpts in notifications
- Location
- EU (Ireland, eu-west-1)
- Transfer safeguard
- EU region, SCCs (AWS DPA)
Stripe Payments Europe, Ltd.
- Purpose
- Subscription billing for workspace owners
- Data
- Billing contact and payment details of customers. No visitor data.
- Location
- EU and US
- Transfer safeguard
- EU-US Data Privacy Framework, SCCs (Stripe DPA)
Error tracking and analytics run on our own servers, not with a third party. Need the signed DPA or more detail on a transfer? contact@muro.chat.